CVE-2016-2203 in Messaging Gateway SMG

Summary

The management console on Symantec Messaging Gateway (SMG) Appliance devices before 10.6.1 allows local users to discover an encrypted AD password by leveraging certain read privileges.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Reservation: 02/01/2016
• Disclosure: 04/22/2016
• Moderation: VulDB entry created
• Entries: VDB-82779 (1)
• CPE: ready
• CWE: CWE-200 (Confirmed)
• Exploit: Download
• CVSS: 3.3
• EPSS: 0.29571
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-2203
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-2203
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-2203/